[tor-bugs] #18221 [Tor]: Validate our DH parameters to prevent socat-type fails.

[Tor Bug Tracker & Wiki]

#18221: Validate our DH parameters to prevent socat-type fails.
-----------------------------+------------------------------------
 Reporter:  yawning          |          Owner:
     Type:  enhancement      |         Status:  needs_review
 Priority:  Medium           |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor              |        Version:  Tor: unspecified
 Severity:  Normal           |     Resolution:
 Keywords:  tor-core crypto  |  Actual Points:
Parent ID:                   |         Points:
  Sponsor:                   |
-----------------------------+------------------------------------

Comment (by nickm):

 Looks correctly written.  I'm not clear what exactly the threat model is
 here, though.  "We replace the primes with something we think is prime,
 but we forget to check"?  "An attacker backdoors our software but doesn't
 figure out how to remove this check, or can't for some reason"?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18221#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online